The Payment Card Industry Data Security Standards (PCI DSS) are basic information security practices that can be applied to the cloud environment in the same way as traditional environments, said Tabatha Greiner, executive consultant for global PCI qua…
Breach at Korean gamer Nexon exposes data on 13 million subscribers
A data breach at South Korean online gamer Nexon has exposed personal information on 13 million subscribers.
ICO dishes out some of first public sector fines against two councils
The Information Commissioner’s Office (ICO) has imposed some of its first fines against public bodies after staff with North Somerset Council and Worcestershire County Council sent highly sensitive personal information to the wrong recipients.
Lyceum Capital acquires Clearswift
Lyceum Capital, a private equity firm, has increased the total amount spent on IT industry investment this year to more than £100 million with the acquisition of data security vendor Clearswift.
Four people arrested in connection with US terrorist-funded PBX hacking
The FBI has revealed that four hackers were arrested in the Philippines last week in connection with an organized attack on the clients of telecoms giant AT&T in the US. Newswire reports suggest that the hacker crew was funded by terrorists linked to a…
Acuity releases free PCI DSS compliance analysis software
Acuity has taken the wraps off a free PCI DSS compliance analysis application that can be downloaded from its web site. The software is billed as being able to identify, assess, manage and report on risks to cardholder data.
Kingston Technology says that secure encrypted USB sticks are no longer enough
Research carried out by Kingston Technology claims to show that purchasing secure and encrypted USB sticks is no longer enough to defend data within a company environment.
Solera head researcher slams malware authors for “lazy, repetitive malware scams”
The director of security research with Solera Networks has called malware authors “mal-slackers” for their “lazy repetitive malware scams” they have created for this US Thanksgiving.
BEAST-driven SSL attack not as bad as it seems claims Context
Researchers at Context Information Security are playing down the level of risk to enterprises caused by the BEAST – Browser Exploit Against SSL/TLS – that was identified by researchers in late September.
ISF publishes guide on risk-free Federated Identity & Access Management
The Information Security Forum (ISF) has published a new report on Federated Identity and Access Management that describes the methodology that IT security professionals need to adopt when implementing the technology into their systems.